Analysis
- user interaction
yes - max time kernel
61s - max time network
43s - platform
windows10-2004_x64 - resource
win10v2004-20260911-en - resource tags
arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows - submitted
02/10/2026, 11:49
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
skeet.exe
Resource
win10v2004-20260911-en
windows10-2004-x64
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
skeet.exe
Resource
win11ltsc2024-20260911-en
windows11-ltsc_2024-x64
1 signatures
150 seconds
General
- Target skeet.exe
- Size 6.9MB
- Sample261002-nzcctstyew
- SHA256 78d27f83b8a929018a91fc971a78e06a2ce932fbe1e74eeb1a16d71c47b21ff1
- MD5 a85c0fb6b1accb42f3bceba66b505d61
- SHA1 3c1df1562d1872da0eb763134850ebebf74efa58
- SHA512 8a4e30f292a10724a8758b41eebb2ef0a4e151c7de7205e74b3aa8a5207b2a427ea4263f3589c4086b81c9a0286b20ef8eea6c1ab80e0d6d7f8f53e1d56d5c04
- SSDEEP 98304:KTuNIbj8TzTa8b7q7iI2loKJBjqcX9uBXDw4/V83j/:KTuN2B8/qqlvJh16DLGz/
- TLSH T1AC76BF03F79650EDD42BC47886979327E631744A0B319ADB13C46B396EA37E01F3A792
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
1/10
Malware Config
Signatures
- Modifies registry class 1 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-895009113-1202185046-1686627690-1000_Classes\Local Settings skeet.exe - Suspicious behavior: EnumeratesProcesses 64 IoCs
pid Process 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe 3260 skeet.exe - Suspicious behavior: GetForegroundWindowSpam 1 IoCs
pid Process 3260 skeet.exe - Suspicious use of SetWindowsHookEx 1 IoCs
pid Process 2372 OpenWith.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\skeet.exe"C:\Users\Admin\AppData\Local\Temp\skeet.exe"1⤵
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
PID:3260
-
C:\Windows\system32\OpenWith.exeC:\Windows\system32\OpenWith.exe -Embedding1⤵
- Suspicious use of SetWindowsHookEx
PID:2372
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\Desktop\skeet_loader.log
- Size 341B
- SHA256 91f81269e9d6482b0b1ff6521783ea8321f16e08842261b0e1a670c0c3dec437
- MD5 956b2090fd83b3e8309619339394292f
- SHA1 095f28300601ed4ad06dba543907f48be976d050
- SHA512 2b34fc5c4e228a51c753f6c1266887f47df6e6998a83a81d7c570da4ebbc3fade005600a42e0746505f54deae1d12e1bc978aa717b25b60fd84267943a116edf
- TLSH T1B4E0DFB3AD4BB0F30AA943A0A3280C07DC72E6E61026ECACA378D34908689518D8BC51
- MD5 SHA1 SHA512 TLSH